Lead Director - Security Operations Center (SOC)
Core
Leading cybersecurity operations for a healthcare business, ensuring detection, investigation, response, and recovery from threats to protect critical operations and data.
Role type
Senior IC Lead Director, Security Operations Center (SOC)
Builds
SOC capabilities, threat detection workflows, incident response processes, and cyber resilience frameworks
Domain
Healthcare + Cybersecurity
Required skills
SOC leadership, threat detection, incident response, threat hunting, security operations strategy, team building, process optimization, regulatory compliance, cloud security, identity security, automation, SIEM, EDR/XDR, SOAR
Preferred skills
Cloud-native security (Azure, GCP, AWS), Zero Trust architecture, ransomware response, security automation, AI-enabled security operations, stakeholder communication
Technologies
Microsoft Sentinel, CrowdStrike Falcon, Wirespeed, Microsoft Defender XDR, Microsoft Defender for Cloud, Entra ID, Google Security Command Center, Microsoft Azure, Google Cloud Platform, Amazon Web Services
Responsibilities
Lead SOC strategy and execution including monitoring, detection, investigation, and response; Establish operational processes, metrics, and reporting; Serve as primary escalation point for cyber incidents; Develop security standards aligned with regulations; Lead initiatives for cyber resilience and ransomware readiness; Build and mentor a high-performing security team; Optimize efficiency through automation and standardization
Seniority
Director, strategic leadership with hands-on operational oversight